@samanhappy/mcphub 1.0.39 → 1.0.41

package/dist/controllers/smartRoutingController.js

@@ -0,0 +1,408 @@
+import { getSmartRoutingConfig } from '../utils/smartRouting.js';
+import { hasCredentialTemplate } from '../utils/credentialTemplate.js';
+import { requireAdmin } from '../utils/requireAdmin.js';
+import { logger } from '../utils/logger.js';
+import { getCredentialBindingDao, getUserDao } from '../dao/DaoFactory.js';
+import { getAppDataSource, getDatabaseHealth, initializeDatabase, isDatabaseConnected, } from '../db/connection.js';
+import { saveToolsAsVectorEmbeddings } from '../services/vectorSearchService.js';
+import { getServerToolsForPrincipal, getServersInfo } from '../services/mcpService.js';
+/**
+ * Resolve the effective embedding model that the vector store is (or will be)
+ * persisted with. Mirrors the resolution in vectorSearchService.saveToolsAsVectorEmbeddings
+ * so the reported model matches what is actually written to vector_embeddings.
+ */
+const resolvePersistedEmbeddingModel = (config) => {
+    const provider = config.embeddingProvider || 'openai';
+    if (provider === 'azure_openai') {
+        return config.azureOpenaiEmbeddingModel?.trim() || 'text-embedding-3-small';
+    }
+    return config.embeddingModel?.trim() || null;
+};
+/**
+ * Read aggregate statistics from the vector_embeddings table.
+ * Returns null when the query fails so callers can degrade gracefully instead
+ * of returning a 500 for a purely informational endpoint.
+ */
+const queryVectorStoreStats = async () => {
+    try {
+        const dataSource = getAppDataSource();
+        const [overview, byModel, byServer, freshness, dims] = await Promise.all([
+            dataSource.query(`SELECT
+           count(*) FILTER (WHERE content_type = 'tool')  AS tool_rows,
+           count(*) FILTER (WHERE content_type = 'server') AS server_rows,
+           count(*)                                       AS total_rows,
+           count(DISTINCT metadata::jsonb->>'serverName') AS distinct_servers
+         FROM vector_embeddings`),
+            dataSource.query(`SELECT model,
+                count(*) FILTER (WHERE content_type = 'tool')  AS tool_count,
+                count(*) FILTER (WHERE content_type = 'server') AS server_count
+         FROM vector_embeddings
+         GROUP BY model
+         ORDER BY model`),
+            dataSource.query(`SELECT metadata::jsonb->>'serverName' AS server_name, count(*) AS tool_count
+         FROM vector_embeddings
+         WHERE content_type = 'tool'
+         GROUP BY 1
+         ORDER BY tool_count DESC
+         LIMIT 500`),
+            dataSource.query(`SELECT to_char(min(updated_at), 'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"') AS oldest,
+                to_char(max(updated_at), 'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"') AS newest
+         FROM vector_embeddings`),
+            dataSource.query(`SELECT atttypmod AS dimensions
+         FROM pg_attribute
+         WHERE attrelid = 'vector_embeddings'::regclass
+           AND attname = 'embedding'`),
+        ]);
+        const rawDimensions = dims?.[0]?.dimensions;
+        const dimValue = Number(rawDimensions);
+        const dimensions = rawDimensions !== undefined && rawDimensions !== null && Number.isFinite(dimValue)
+            ? dimValue
+            : null;
+        return {
+            totalRows: Number(overview?.[0]?.total_rows ?? 0),
+            toolRows: Number(overview?.[0]?.tool_rows ?? 0),
+            serverRows: Number(overview?.[0]?.server_rows ?? 0),
+            distinctServers: Number(overview?.[0]?.distinct_servers ?? 0),
+            dimensions,
+            byModel: (byModel ?? []).map((row) => ({
+                model: String(row.model ?? ''),
+                toolCount: Number(row.tool_count ?? 0),
+                serverCount: Number(row.server_count ?? 0),
+            })),
+            byServer: (byServer ?? []).map((row) => ({
+                serverName: String(row.server_name ?? ''),
+                toolCount: Number(row.tool_count ?? 0),
+            })),
+            oldestUpdatedAt: freshness?.[0]?.oldest ?? null,
+            newestUpdatedAt: freshness?.[0]?.newest ?? null,
+        };
+    }
+    catch (error) {
+        logger.warn('Failed to collect vector store statistics:', error);
+        return null;
+    }
+};
+/**
+ * Serializes reindex passes inside this process. Overlapping runs would
+ * interleave their DELETE and re-embed work — leaving partially indexed servers
+ * behind — and double-spend embedding quota, so a second caller is rejected
+ * with 409 instead of racing the run in flight.
+ */
+let reindexInFlight = false;
+/**
+ * GET /api/smart-routing/performance
+ *
+ * Returns a read-only snapshot of smart routing health and the vector store:
+ * resolved embedding configuration, database connection state, row counts,
+ * per-model/per-server breakdown, and sync freshness.
+ *
+ * Admin-only: the dashboard renders this section behind the admin-only
+ * `settings:smart_routing` permission, and the snapshot exposes global
+ * operational state (database configuration, index coverage).
+ */
+export const getSmartRoutingPerformance = async (req, res) => {
+    if (!(await requireAdmin(req, res)))
+        return;
+    try {
+        const smartRoutingConfig = await getSmartRoutingConfig();
+        const databaseHealth = getDatabaseHealth();
+        // Only reach into the database when smart routing is enabled and a DB URL
+        // is configured; otherwise report the disabled/unconfigured state as-is.
+        const dbAvailable = smartRoutingConfig.enabled &&
+            Boolean(smartRoutingConfig.dbUrl || process.env.DB_URL);
+        let vectorStore = null;
+        if (dbAvailable) {
+            if (!isDatabaseConnected()) {
+                try {
+                    await initializeDatabase();
+                }
+                catch (error) {
+                    logger.warn('Failed to initialize database for performance stats:', error);
+                }
+            }
+            if (isDatabaseConnected()) {
+                vectorStore = await queryVectorStoreStats();
+            }
+        }
+        // Coverage is measured against every enabled server, not only the ones this
+        // principal happens to see connected: servers that require personal
+        // credentials are never connected globally, so a "connected" baseline would
+        // silently hide them from the index report.
+        let enabledServerNames = [];
+        let connectedServers = 0;
+        let personalCredentialServers = 0;
+        try {
+            const servers = await getServersInfo();
+            const enabled = servers.filter((server) => server.enabled !== false);
+            enabledServerNames = enabled.map((server) => server.name);
+            connectedServers = enabled.filter((server) => server.status === 'connected').length;
+            personalCredentialServers = enabled.filter((server) => hasCredentialTemplate(server.config)).length;
+        }
+        catch (error) {
+            logger.warn('Failed to resolve servers for performance stats:', error);
+        }
+        const indexedServerSet = new Set((vectorStore?.byServer ?? []).map((entry) => entry.serverName));
+        const missingIndexServers = enabledServerNames.filter((name) => !indexedServerSet.has(name));
+        const provider = smartRoutingConfig.embeddingProvider || 'openai';
+        const data = {
+            enabled: smartRoutingConfig.enabled,
+            reindexing: reindexInFlight,
+            config: {
+                provider,
+                model: resolvePersistedEmbeddingModel(smartRoutingConfig),
+                configuredDimensions: typeof smartRoutingConfig.embeddingDimensions === 'number'
+                    ? smartRoutingConfig.embeddingDimensions
+                    : null,
+            },
+            database: {
+                connected: databaseHealth.connected,
+                healthy: databaseHealth.healthy,
+                lastError: databaseHealth.lastError,
+            },
+            vectorStore: {
+                available: vectorStore !== null,
+                ...(vectorStore ?? {
+                    totalRows: 0,
+                    toolRows: 0,
+                    serverRows: 0,
+                    distinctServers: 0,
+                    dimensions: null,
+                    byModel: [],
+                    byServer: [],
+                    oldestUpdatedAt: null,
+                    newestUpdatedAt: null,
+                }),
+            },
+            coverage: {
+                totalServers: enabledServerNames.length,
+                connectedServers,
+                personalCredentialServers,
+                indexedServers: indexedServerSet.size,
+                missingIndexServerCount: missingIndexServers.length,
+                missingIndexServers: missingIndexServers.slice(0, 100),
+            },
+        };
+        const response = { success: true, data };
+        res.json(response);
+    }
+    catch (error) {
+        logger.error('Failed to collect smart routing performance stats:', error);
+        res.status(500).json({ success: false, message: 'Failed to collect smart routing performance stats' });
+    }
+};
+/**
+ * Usernames holding a personal credential binding for a server, ordered with
+ * the server owner first so indexing favours the account that defines it.
+ */
+const listBindingUsernames = async (serverName, owner) => {
+    try {
+        const usernames = await getCredentialBindingDao().listUsernames(serverName);
+        const unique = [
+            ...new Set(usernames.filter((name) => typeof name === 'string' && name.trim().length > 0)),
+        ];
+        unique.sort((a, b) => {
+            if (a === owner)
+                return -1;
+            if (b === owner)
+                return 1;
+            return a.localeCompare(b);
+        });
+        return unique;
+    }
+    catch (error) {
+        logger.warn(`Failed to list credential bindings for server "${serverName}":`, error);
+        return [];
+    }
+};
+/**
+ * Collect the union of tools that the binding principals can see for a server.
+ * Principals are resolved sequentially because each one may spawn its own
+ * upstream connection; a reindex pass should not fan out across all of them.
+ */
+const collectToolsForPrincipals = async (serverName, usernames) => {
+    const merged = new Map();
+    const principals = [];
+    const errors = [];
+    for (const username of usernames) {
+        try {
+            const user = await getUserDao().findByUsername(username);
+            if (!user) {
+                errors.push(`${username}: user not found`);
+                continue;
+            }
+            const tools = await getServerToolsForPrincipal(serverName, {
+                username,
+                isAdmin: Boolean(user.isAdmin),
+                credentialEligible: true,
+            });
+            for (const tool of tools) {
+                if (tool?.name && !merged.has(tool.name)) {
+                    merged.set(tool.name, tool);
+                }
+            }
+            principals.push(username);
+        }
+        catch (error) {
+            errors.push(`${username}: ${error?.message ? String(error.message) : 'unknown error'}`);
+        }
+    }
+    return { tools: [...merged.values()], principals, errors };
+};
+/**
+ * POST /api/smart-routing/reindex
+ *
+ * Force a full rebuild of all vector embeddings: every row in
+ * vector_embeddings is cleared, then every enabled server is re-embedded.
+ *
+ * Servers that declare a personal credential template are never connected
+ * globally — their runtime only exists for principals that bound their own
+ * credentials. Those servers are therefore indexed on behalf of the users who
+ * hold a binding (the server owner first), and the union of the tools those
+ * principals can see is what gets embedded. A server with no binding at all is
+ * reported as skipped instead of being silently dropped from the index.
+ *
+ * Progress is streamed to authenticated clients through the existing
+ * embedding-sync-progress SSE events emitted by saveToolsAsVectorEmbeddings.
+ * Response is sent only when the whole pass finishes (synchronous execution).
+ *
+ * Admin-only, and serialized: it clears a global table and spends embedding
+ * quota, so a second concurrent call is answered with 409.
+ */
+export const reindexSmartRouting = async (req, res) => {
+    if (!(await requireAdmin(req, res)))
+        return;
+    if (reindexInFlight) {
+        res.status(409).json({
+            success: false,
+            message: 'A reindex pass is already running',
+        });
+        return;
+    }
+    reindexInFlight = true;
+    try {
+        const smartRoutingConfig = await getSmartRoutingConfig();
+        if (!smartRoutingConfig.enabled) {
+            res.status(400).json({ success: false, message: 'Smart routing is not enabled' });
+            return;
+        }
+        if (!smartRoutingConfig.dbUrl && !process.env.DB_URL) {
+            res.status(400).json({ success: false, message: 'Database (DB_URL) is not configured' });
+            return;
+        }
+        if (!isDatabaseConnected()) {
+            await initializeDatabase();
+        }
+        // 1. Clear the existing index so every tool is regenerated from scratch.
+        logger.log('Reindex: clearing all vector embeddings');
+        await getAppDataSource().query('DELETE FROM vector_embeddings');
+        // 2. Re-embed every enabled server.
+        const servers = await getServersInfo();
+        const results = [];
+        let totalTools = 0;
+        let syncedServers = 0;
+        let failedServers = 0;
+        let skippedServers = 0;
+        for (const server of servers) {
+            if (server.enabled === false) {
+                continue;
+            }
+            let tools;
+            let principals;
+            if (hasCredentialTemplate(server.config)) {
+                // Personal-credential server: borrow the principals that can reach it.
+                const usernames = await listBindingUsernames(server.name, server.config?.owner);
+                if (usernames.length === 0) {
+                    skippedServers += 1;
+                    results.push({
+                        serverName: server.name,
+                        toolCount: 0,
+                        ok: false,
+                        skipped: true,
+                        error: 'No user has bound personal credentials for this server',
+                    });
+                    continue;
+                }
+                const collected = await collectToolsForPrincipals(server.name, usernames);
+                principals = collected.principals;
+                tools = collected.tools;
+                if (tools.length === 0) {
+                    failedServers += 1;
+                    results.push({
+                        serverName: server.name,
+                        toolCount: 0,
+                        ok: false,
+                        principals,
+                        error: collected.errors.join('; ') ||
+                            'No tools could be resolved with the bound personal credentials',
+                    });
+                    continue;
+                }
+            }
+            else {
+                if (server.status !== 'connected') {
+                    skippedServers += 1;
+                    results.push({
+                        serverName: server.name,
+                        toolCount: 0,
+                        ok: false,
+                        skipped: true,
+                        error: `Server is not connected (status: ${server.status ?? 'unknown'})`,
+                    });
+                    continue;
+                }
+                tools = server.tools ?? [];
+                if (tools.length === 0) {
+                    skippedServers += 1;
+                    results.push({
+                        serverName: server.name,
+                        toolCount: 0,
+                        ok: false,
+                        skipped: true,
+                        error: 'Server exposes no tools',
+                    });
+                    continue;
+                }
+            }
+            try {
+                await saveToolsAsVectorEmbeddings(server.name, tools, { reportProgress: true });
+                syncedServers += 1;
+                totalTools += tools.length;
+                results.push({
+                    serverName: server.name,
+                    toolCount: tools.length,
+                    ok: true,
+                    ...(principals ? { principals } : {}),
+                });
+            }
+            catch (error) {
+                failedServers += 1;
+                logger.error(`Reindex failed for server "${server.name}":`, error);
+                results.push({
+                    serverName: server.name,
+                    toolCount: tools.length,
+                    ok: false,
+                    ...(principals ? { principals } : {}),
+                    error: error?.message ? String(error.message) : 'Unknown error',
+                });
+            }
+        }
+        const data = {
+            syncedServers,
+            failedServers,
+            skippedServers,
+            totalTools,
+            results,
+        };
+        logger.log('Reindex completed', { syncedServers, failedServers, skippedServers, totalTools });
+        const response = { success: true, data };
+        res.json(response);
+    }
+    catch (error) {
+        logger.error('Failed to rebuild smart routing index:', error);
+        res.status(500).json({ success: false, message: 'Failed to rebuild smart routing index' });
+    }
+    finally {
+        reindexInFlight = false;
+    }
+};
+//# sourceMappingURL=smartRoutingController.js.map

package/dist/controllers/smartRoutingController.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"smartRoutingController.js","sourceRoot":"","sources":["../../src/controllers/smartRoutingController.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAA2B,MAAM,0BAA0B,CAAC;AAC1F,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,uBAAuB,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAC3E,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AACjF,OAAO,EAAE,0BAA0B,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAEvF;;;;GAIG;AACH,MAAM,8BAA8B,GAAG,CACrC,MAA0B,EACX,EAAE;IACjB,MAAM,QAAQ,GAAG,MAAM,CAAC,iBAAiB,IAAI,QAAQ,CAAC;IACtD,IAAI,QAAQ,KAAK,cAAc,EAAE,CAAC;QAChC,OAAO,MAAM,CAAC,yBAAyB,EAAE,IAAI,EAAE,IAAI,wBAAwB,CAAC;IAC9E,CAAC;IACD,OAAO,MAAM,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;AAC/C,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,qBAAqB,GAAG,KAAK,IAUzB,EAAE;IACV,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,gBAAgB,EAAE,CAAC;QAEtC,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACvE,UAAU,CAAC,KAAK,CACd;;;;;gCAKwB,CACzB;YACD,UAAU,CAAC,KAAK,CACd;;;;;wBAKgB,CACjB;YACD,UAAU,CAAC,KAAK,CACd;;;;;mBAKW,CACZ;YACD,UAAU,CAAC,KAAK,CACd;;gCAEwB,CACzB;YACD,UAAU,CAAC,KAAK,CACd;;;qCAG6B,CAC9B;SACF,CAAC,CAAC;QAEH,MAAM,aAAa,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC;QAC5C,MAAM,QAAQ,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC;QACvC,MAAM,UAAU,GACd,aAAa,KAAK,SAAS,IAAI,aAAa,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAChF,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,IAAI,CAAC;QAEX,OAAO;YACL,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,IAAI,CAAC,CAAC;YACjD,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,IAAI,CAAC,CAAC;YAC/C,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,IAAI,CAAC,CAAC;YACnD,eAAe,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,IAAI,CAAC,CAAC;YAC7D,UAAU;YACV,OAAO,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAQ,EAAE,EAAE,CAAC,CAAC;gBAC1C,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC9B,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;gBACtC,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC;aAC3C,CAAC,CAAC;YACH,QAAQ,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAQ,EAAE,EAAE,CAAC,CAAC;gBAC5C,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;gBACzC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;aACvC,CAAC,CAAC;YACH,eAAe,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,IAAI;YAC/C,eAAe,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,IAAI;SAChD,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE,KAAK,CAAC,CAAC;QACjE,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF;;;;;GAKG;AACH,IAAI,eAAe,GAAG,KAAK,CAAC;AAE5B;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,KAAK,EAC7C,GAAY,EACZ,GAAa,EACE,EAAE;IACjB,IAAI,CAAC,CAAC,MAAM,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAAE,OAAO;IAE5C,IAAI,CAAC;QACH,MAAM,kBAAkB,GAAG,MAAM,qBAAqB,EAAE,CAAC;QACzD,MAAM,cAAc,GAAG,iBAAiB,EAAE,CAAC;QAE3C,0EAA0E;QAC1E,yEAAyE;QACzE,MAAM,WAAW,GACf,kBAAkB,CAAC,OAAO;YAC1B,OAAO,CAAC,kBAAkB,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAE1D,IAAI,WAAW,GAAsD,IAAI,CAAC;QAC1E,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC,mBAAmB,EAAE,EAAE,CAAC;gBAC3B,IAAI,CAAC;oBACH,MAAM,kBAAkB,EAAE,CAAC;gBAC7B,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,IAAI,CAAC,sDAAsD,EAAE,KAAK,CAAC,CAAC;gBAC7E,CAAC;YACH,CAAC;YACD,IAAI,mBAAmB,EAAE,EAAE,CAAC;gBAC1B,WAAW,GAAG,MAAM,qBAAqB,EAAE,CAAC;YAC9C,CAAC;QACH,CAAC;QAED,4EAA4E;QAC5E,oEAAoE;QACpE,4EAA4E;QAC5E,4CAA4C;QAC5C,IAAI,kBAAkB,GAAa,EAAE,CAAC;QACtC,IAAI,gBAAgB,GAAG,CAAC,CAAC;QACzB,IAAI,yBAAyB,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,cAAc,EAAE,CAAC;YACvC,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC;YACrE,kBAAkB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC1D,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,MAAM,CAAC;YACpF,yBAAyB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CACpD,qBAAqB,CAAC,MAAM,CAAC,MAAM,CAAC,CACrC,CAAC,MAAM,CAAC;QACX,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,kDAAkD,EAAE,KAAK,CAAC,CAAC;QACzE,CAAC;QAED,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAC9B,CAAC,WAAW,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAC/D,CAAC;QACF,MAAM,mBAAmB,GAAG,kBAAkB,CAAC,MAAM,CACnD,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CACtC,CAAC;QAEF,MAAM,QAAQ,GAAG,kBAAkB,CAAC,iBAAiB,IAAI,QAAQ,CAAC;QAClE,MAAM,IAAI,GAAG;YACX,OAAO,EAAE,kBAAkB,CAAC,OAAO;YACnC,UAAU,EAAE,eAAe;YAC3B,MAAM,EAAE;gBACN,QAAQ;gBACR,KAAK,EAAE,8BAA8B,CAAC,kBAAkB,CAAC;gBACzD,oBAAoB,EAClB,OAAO,kBAAkB,CAAC,mBAAmB,KAAK,QAAQ;oBACxD,CAAC,CAAC,kBAAkB,CAAC,mBAAmB;oBACxC,CAAC,CAAC,IAAI;aACX;YACD,QAAQ,EAAE;gBACR,SAAS,EAAE,cAAc,CAAC,SAAS;gBACnC,OAAO,EAAE,cAAc,CAAC,OAAO;gBAC/B,SAAS,EAAE,cAAc,CAAC,SAAS;aACpC;YACD,WAAW,EAAE;gBACX,SAAS,EAAE,WAAW,KAAK,IAAI;gBAC/B,GAAG,CAAC,WAAW,IAAI;oBACjB,SAAS,EAAE,CAAC;oBACZ,QAAQ,EAAE,CAAC;oBACX,UAAU,EAAE,CAAC;oBACb,eAAe,EAAE,CAAC;oBAClB,UAAU,EAAE,IAAI;oBAChB,OAAO,EAAE,EAAE;oBACX,QAAQ,EAAE,EAAE;oBACZ,eAAe,EAAE,IAAI;oBACrB,eAAe,EAAE,IAAI;iBACtB,CAAC;aACH;YACD,QAAQ,EAAE;gBACR,YAAY,EAAE,kBAAkB,CAAC,MAAM;gBACvC,gBAAgB;gBAChB,yBAAyB;gBACzB,cAAc,EAAE,gBAAgB,CAAC,IAAI;gBACrC,uBAAuB,EAAE,mBAAmB,CAAC,MAAM;gBACnD,mBAAmB,EAAE,mBAAmB,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;aACvD;SACF,CAAC;QAEF,MAAM,QAAQ,GAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACtD,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,oDAAoD,EAAE,KAAK,CAAC,CAAC;QAC1E,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,mDAAmD,EAAE,CAAC,CAAC;IACzG,CAAC;AACH,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,oBAAoB,GAAG,KAAK,EAChC,UAAkB,EAClB,KAAc,EACK,EAAE;IACrB,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,uBAAuB,EAAE,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;QAC5E,MAAM,MAAM,GAAG;YACb,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;SAC3F,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACnB,IAAI,CAAC,KAAK,KAAK;gBAAE,OAAO,CAAC,CAAC,CAAC;YAC3B,IAAI,CAAC,KAAK,KAAK;gBAAE,OAAO,CAAC,CAAC;YAC1B,OAAO,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,kDAAkD,UAAU,IAAI,EAAE,KAAK,CAAC,CAAC;QACrF,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,yBAAyB,GAAG,KAAK,EACrC,UAAkB,EAClB,SAAmB,EACiD,EAAE;IACtE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAgB,CAAC;IACvC,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,UAAU,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;YACzD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,kBAAkB,CAAC,CAAC;gBAC3C,SAAS;YACX,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,0BAA0B,CAAC,UAAU,EAAE;gBACzD,QAAQ;gBACR,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;gBAC9B,kBAAkB,EAAE,IAAI;aACzB,CAAC,CAAC;YACH,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,IAAI,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACzC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAC9B,CAAC;YACH,CAAC;YACD,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,MAAM,CAAC,IAAI,CACT,GAAG,QAAQ,KAAK,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,eAAe,EAAE,CAC3E,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AAC7D,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,EACtC,GAAY,EACZ,GAAa,EACE,EAAE;IACjB,IAAI,CAAC,CAAC,MAAM,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAAE,OAAO;IAE5C,IAAI,eAAe,EAAE,CAAC;QACpB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,mCAAmC;SAC7C,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,eAAe,GAAG,IAAI,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,kBAAkB,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAEzD,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,CAAC;YAChC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC,CAAC;YAClF,OAAO;QACT,CAAC;QACD,IAAI,CAAC,kBAAkB,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;YACrD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC,CAAC;YACzF,OAAO;QACT,CAAC;QAED,IAAI,CAAC,mBAAmB,EAAE,EAAE,CAAC;YAC3B,MAAM,kBAAkB,EAAE,CAAC;QAC7B,CAAC;QAED,yEAAyE;QACzE,MAAM,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;QACtD,MAAM,gBAAgB,EAAE,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAEhE,oCAAoC;QACpC,MAAM,OAAO,GAAG,MAAM,cAAc,EAAE,CAAC;QAEvC,MAAM,OAAO,GAOR,EAAE,CAAC;QACR,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,IAAI,cAAc,GAAG,CAAC,CAAC;QAEvB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;gBAC7B,SAAS;YACX,CAAC;YAED,IAAI,KAAa,CAAC;YAClB,IAAI,UAAgC,CAAC;YAErC,IAAI,qBAAqB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzC,uEAAuE;gBACvE,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;gBAChF,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC3B,cAAc,IAAI,CAAC,CAAC;oBACpB,OAAO,CAAC,IAAI,CAAC;wBACX,UAAU,EAAE,MAAM,CAAC,IAAI;wBACvB,SAAS,EAAE,CAAC;wBACZ,EAAE,EAAE,KAAK;wBACT,OAAO,EAAE,IAAI;wBACb,KAAK,EAAE,wDAAwD;qBAChE,CAAC,CAAC;oBACH,SAAS;gBACX,CAAC;gBAED,MAAM,SAAS,GAAG,MAAM,yBAAyB,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;gBAC1E,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC;gBAClC,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC;gBACxB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACvB,aAAa,IAAI,CAAC,CAAC;oBACnB,OAAO,CAAC,IAAI,CAAC;wBACX,UAAU,EAAE,MAAM,CAAC,IAAI;wBACvB,SAAS,EAAE,CAAC;wBACZ,EAAE,EAAE,KAAK;wBACT,UAAU;wBACV,KAAK,EACH,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;4BAC3B,gEAAgE;qBACnE,CAAC,CAAC;oBACH,SAAS;gBACX,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;oBAClC,cAAc,IAAI,CAAC,CAAC;oBACpB,OAAO,CAAC,IAAI,CAAC;wBACX,UAAU,EAAE,MAAM,CAAC,IAAI;wBACvB,SAAS,EAAE,CAAC;wBACZ,EAAE,EAAE,KAAK;wBACT,OAAO,EAAE,IAAI;wBACb,KAAK,EAAE,oCAAoC,MAAM,CAAC,MAAM,IAAI,SAAS,GAAG;qBACzE,CAAC,CAAC;oBACH,SAAS;gBACX,CAAC;gBACD,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC3B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACvB,cAAc,IAAI,CAAC,CAAC;oBACpB,OAAO,CAAC,IAAI,CAAC;wBACX,UAAU,EAAE,MAAM,CAAC,IAAI;wBACvB,SAAS,EAAE,CAAC;wBACZ,EAAE,EAAE,KAAK;wBACT,OAAO,EAAE,IAAI;wBACb,KAAK,EAAE,yBAAyB;qBACjC,CAAC,CAAC;oBACH,SAAS;gBACX,CAAC;YACH,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,2BAA2B,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;gBAChF,aAAa,IAAI,CAAC,CAAC;gBACnB,UAAU,IAAI,KAAK,CAAC,MAAM,CAAC;gBAC3B,OAAO,CAAC,IAAI,CAAC;oBACX,UAAU,EAAE,MAAM,CAAC,IAAI;oBACvB,SAAS,EAAE,KAAK,CAAC,MAAM;oBACvB,EAAE,EAAE,IAAI;oBACR,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACtC,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,aAAa,IAAI,CAAC,CAAC;gBACnB,MAAM,CAAC,KAAK,CAAC,8BAA8B,MAAM,CAAC,IAAI,IAAI,EAAE,KAAK,CAAC,CAAC;gBACnE,OAAO,CAAC,IAAI,CAAC;oBACX,UAAU,EAAE,MAAM,CAAC,IAAI;oBACvB,SAAS,EAAE,KAAK,CAAC,MAAM;oBACvB,EAAE,EAAE,KAAK;oBACT,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACrC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,eAAe;iBAChE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAAG;YACX,aAAa;YACb,aAAa;YACb,cAAc;YACd,UAAU;YACV,OAAO;SACR,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,mBAAmB,EAAE,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,EAAE,UAAU,EAAE,CAAC,CAAC;QAE9F,MAAM,QAAQ,GAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACtD,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,wCAAwC,EAAE,KAAK,CAAC,CAAC;QAC9D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC,CAAC;IAC7F,CAAC;YAAS,CAAC;QACT,eAAe,GAAG,KAAK,CAAC;IAC1B,CAAC;AACH,CAAC,CAAC"}

package/dist/dao/CredentialBindingDao.js

@@ -36,6 +36,11 @@ export class CredentialBindingDaoImpl {
         return (this.readAll().find((item) => item.serverName === serverName && item.username === username) ??
             null);
     }
+    async listUsernames(serverName) {
+        return this.readAll()
+            .filter((item) => item.serverName === serverName)
+            .map((item) => item.username);
+    }
     async save(binding) {
         const bindings = this.readAll().filter((item) => item.serverName !== binding.serverName || item.username !== binding.username);
         this.write([...bindings, binding]);

package/dist/dao/CredentialBindingDao.js.map

@@ -1 +1 @@
-{"version":3,"file":"CredentialBindingDao.js","sourceRoot":"","sources":["../../src/dao/CredentialBindingDao.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAUrD,oFAAoF;AACpF,MAAM,OAAO,wBAAwB;IACnC,KAAK,CAAC,WAAW;QACf,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;IACnC,CAAC;IAED,OAAO;QACL,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,eAAe,EAAE,mBAAmB,EAAE,MAAM,CAAC,CAAC,CAAC;YAC9F,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YAClF,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAE,CAAC;YAClE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,QAAmC;QAC/C,MAAM,IAAI,GAAG,GAAG,eAAe,EAAE,mBAAmB,CAAC;QACrD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,UAAU,EAAE,MAAM,CAAC;QAChD,IAAI,CAAC;YACH,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACnF,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACjC,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,UAAkB,EAAE,QAAgB;QAC5C,OAAO,CACL,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,KAAK,UAAU,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC;YAC3F,IAAI,CACL,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAgC;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,MAAM,CACpC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,CACvF,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAkD;QAC7D,IAAI,CAAC,KAAK,CACR,IAAI,CAAC,OAAO,EAAE,CAAC,MAAM,CACnB,CAAC,IAAI,EAAE,EAAE,CACP,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU,CAAC;YAC1E,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC,CACvE,CACF,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"CredentialBindingDao.js","sourceRoot":"","sources":["../../src/dao/CredentialBindingDao.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAgBrD,oFAAoF;AACpF,MAAM,OAAO,wBAAwB;IACnC,KAAK,CAAC,WAAW;QACf,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;IACnC,CAAC;IAED,OAAO;QACL,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,eAAe,EAAE,mBAAmB,EAAE,MAAM,CAAC,CAAC,CAAC;YAC9F,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YAClF,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAE,CAAC;YAClE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,QAAmC;QAC/C,MAAM,IAAI,GAAG,GAAG,eAAe,EAAE,mBAAmB,CAAC;QACrD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,UAAU,EAAE,MAAM,CAAC;QAChD,IAAI,CAAC;YACH,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACnF,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACjC,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,UAAkB,EAAE,QAAgB;QAC5C,OAAO,CACL,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,KAAK,UAAU,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC;YAC3F,IAAI,CACL,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,UAAkB;QACpC,OAAO,IAAI,CAAC,OAAO,EAAE;aAClB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,KAAK,UAAU,CAAC;aAChD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAgC;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,MAAM,CACpC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,CACvF,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAkD;QAC7D,IAAI,CAAC,KAAK,CACR,IAAI,CAAC,OAAO,EAAE,CAAC,MAAM,CACnB,CAAC,IAAI,EAAE,EAAE,CACP,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU,CAAC;YAC1E,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC,CACvE,CACF,CAAC;IACJ,CAAC;CACF"}

package/dist/dao/CredentialBindingDaoDbImpl.js

@@ -10,6 +10,13 @@ export class CredentialBindingDaoDbImpl {
     async get(serverName, username) {
         return this.repository.findOneBy({ serverName, username });
     }
+    async listUsernames(serverName) {
+        const rows = await this.repository.find({
+            where: { serverName },
+            select: { username: true },
+        });
+        return rows.map((row) => row.username);
+    }
     async save(binding) {
         await this.repository.upsert(binding, ['serverName', 'username']);
     }

package/dist/dao/CredentialBindingDaoDbImpl.js.map

@@ -1 +1 @@
-{"version":3,"file":"CredentialBindingDaoDbImpl.js","sourceRoot":"","sources":["../../src/dao/CredentialBindingDaoDbImpl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AAIxE,MAAM,OAAO,0BAA0B;IACrC,IAAY,UAAU;QACpB,OAAO,gBAAgB,EAAE,CAAC,aAAa,CAAC,iBAAiB,CAAC,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,WAAW;QACf,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,UAAkB,EAAE,QAAgB;QAC5C,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAgC;QACzC,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAkD;QAC7D,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;CACF"}
+{"version":3,"file":"CredentialBindingDaoDbImpl.js","sourceRoot":"","sources":["../../src/dao/CredentialBindingDaoDbImpl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AAIxE,MAAM,OAAO,0BAA0B;IACrC,IAAY,UAAU;QACpB,OAAO,gBAAgB,EAAE,CAAC,aAAa,CAAC,iBAAiB,CAAC,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,WAAW;QACf,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,UAAkB,EAAE,QAAgB;QAC5C,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,UAAkB;QACpC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YACtC,KAAK,EAAE,EAAE,UAAU,EAAE;YACrB,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;SAC3B,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAgC;QACzC,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAkD;QAC7D,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;CACF"}

package/dist/db/connection.js

@@ -7,6 +7,7 @@ import { VectorEmbeddingSubscriber } from './subscribers/VectorEmbeddingSubscrib
 import { getSmartRoutingConfig } from '../utils/smartRouting.js';
 import { createVectorIndex } from '../services/vectorSearchService.js';
 import { isRetryableDbError } from '../utils/dbRetry.js';
+import { withTimeout } from '../utils/withTimeout.js';
 import { logger } from '../utils/logger.js';
 // Connection pool and retry configuration
 const CONNECTION_CONFIG = {
@@ -17,8 +18,18 @@ const CONNECTION_CONFIG = {
     // Automatic reconnection settings
     maxConnectionRetries: parseInt(process.env.DB_MAX_CONNECTION_RETRIES || '5', 10),
     connectionRetryDelayMs: parseInt(process.env.DB_CONNECTION_RETRY_DELAY || '3000', 10),
+    // Bounds pool teardown during reconnection. pg-pool's end() only completes
+    // once every client is returned, so a client stuck in an open transaction
+    // (idle in transaction) would otherwise wedge reconnection forever (#1205).
+    destroyTimeout: parseInt(process.env.DB_DESTROY_TIMEOUT || '15000', 10), // 15 seconds
+    // Postgres-side safety valves (0 = use PostgreSQL defaults / disabled). Set
+    // per-connection via the startup packet so a hung query or a session left in
+    // `idle in transaction` cannot hold a pooled connection indefinitely.
+    statementTimeout: parseInt(process.env.DB_STATEMENT_TIMEOUT || '0', 10),
+    idleInTransactionSessionTimeout: parseInt(process.env.DB_IDLE_IN_TRANSACTION_TIMEOUT || '0', 10),
     // Health check settings
     healthCheckIntervalMs: parseInt(process.env.DB_HEALTH_CHECK_INTERVAL || '30000', 10), // 30 seconds
+    healthCheckQueryTimeout: parseInt(process.env.DB_HEALTH_CHECK_QUERY_TIMEOUT || '5000', 10), // 5 seconds
     enableHealthCheck: process.env.DB_ENABLE_HEALTH_CHECK !== 'false',
 };
 // Health check state
@@ -94,6 +105,11 @@ const getDefaultConfig = async () => {
             // Keep-alive settings to detect dead connections faster
             keepAlive: true,
             keepAliveInitialDelayMillis: 10000,
+            // Postgres-side safety valves (0 = PostgreSQL default / disabled): a
+            // hung query or a session stuck in `idle in transaction` must not be
+            // able to hold a pooled connection indefinitely (#1205).
+            statement_timeout: CONNECTION_CONFIG.statementTimeout,
+            idle_in_transaction_session_timeout: CONNECTION_CONFIG.idleInTransactionSessionTimeout,
         },
     };
 };
@@ -394,8 +410,10 @@ export const checkDatabaseHealth = async () => {
         }
     }
     try {
-        // Simple query to check connection
-        await appDataSource.query('SELECT 1');
+        // Simple query to check connection. Bounded by a short timeout so a DB
+        // that stops accepting queries cannot stall the health probe for the full
+        // pool connection timeout (#1205).
+        await withTimeout(appDataSource.query('SELECT 1'), CONNECTION_CONFIG.healthCheckQueryTimeout, `DB health check failed: connection timeout after ${CONNECTION_CONFIG.healthCheckQueryTimeout}ms`);
         isHealthy = true;
         lastHealthCheckError = null;
         return true;
@@ -453,25 +471,33 @@ const attemptReconnection = () => {
             if (!appDataSource) {
                 return await initializeDatabase();
             }
-            const dataSource = appDataSource;
+            let dataSource = appDataSource;
             if (dataSource.isInitialized) {
                 try {
                     logger.log('[DB Reconnect] Closing existing connection...');
-                    await dataSource.destroy();
+                    // pg-pool end() waits for every checked-out client. A client stuck
+                    // in an open transaction would make destroy() hang forever, wedging
+                    // the whole reconnection machinery — bound it and fall back to a
+                    // fresh pool instead (#1205).
+                    await withTimeout(dataSource.destroy(), CONNECTION_CONFIG.destroyTimeout, `[DB Reconnect] destroy() timed out after ${CONNECTION_CONFIG.destroyTimeout}ms`);
                 }
                 catch (closeError) {
                     logger.warn('[DB Reconnect] Error closing connection:', closeError.message);
-                    // TypeORM only clears this flag after driver.disconnect() succeeds.
-                    // If the driver pool is already gone, destroy() throws first and leaves
-                    // the DataSource incorrectly marked as initialized.
-                    Object.assign(dataSource, { isInitialized: false });
+                    // The old destroy may still finish later and mutate its driver and
+                    // isInitialized flag. Never initialize that same instance again.
+                    dataSource = new DataSource({ ...dataSource.options });
+                    appDataSource = dataSource;
                 }
             }
             let lastError = null;
             for (let attempt = 1; attempt <= CONNECTION_CONFIG.maxConnectionRetries; attempt++) {
                 try {
                     logger.log(`[DB Reconnect] Connection attempt ${attempt}/${CONNECTION_CONFIG.maxConnectionRetries}...`);
-                    await initializeWithGroupNameCheck(dataSource);
+                    // Reconnect with skipSynchronize: schema DDL runs inside a
+                    // transaction and can block on locks held by live traffic, leaving a
+                    // connection stuck in `idle in transaction` and blocking pool
+                    // teardown. The schema is already synchronized from startup (#1205).
+                    await initializeWithGroupNameCheck(dataSource, { skipSynchronize: true });
                     registerPostgresVectorType(dataSource);
                     appDataSource = dataSource;
                     logger.log('[DB Reconnect] Successfully reconnected to database');
@@ -484,11 +510,12 @@ const attemptReconnection = () => {
                     logger.warn(`[DB Reconnect] Attempt ${attempt} failed: ${lastError.message}`);
                     if (dataSource.isInitialized) {
                         try {
-                            await dataSource.destroy();
+                            await withTimeout(dataSource.destroy(), CONNECTION_CONFIG.destroyTimeout, `[DB Reconnect] Cleanup destroy() timed out after ${CONNECTION_CONFIG.destroyTimeout}ms`);
                         }
                         catch (destroyError) {
                             logger.warn('[DB Reconnect] Error cleaning up partially initialized connection:', destroyError.message);
-                            Object.assign(dataSource, { isInitialized: false });
+                            dataSource = new DataSource({ ...dataSource.options });
+                            appDataSource = dataSource;
                         }
                     }
                     if (attempt < CONNECTION_CONFIG.maxConnectionRetries) {